/
loss_type:credentials × criticity:medium × victim_sectors:"software development" × limpar

Resultados

2 casos · pág. 1/1

blog.checkpoint.com · medium

Aokigahara infostealer targets AI assistant sessions, Git, SSH and cloud credentials on developer endpoints

Check Point Research (CPR) analyzed Aokigahara, a newly observed infostealer seen in the wild that explicitly targets authentication files, session data and configuration files of AI applications and developer tools. Targeted tools include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI and JetBrains AI Assist…

technology software development
bleepingcomputer.com · medium

Sponsored analysis: stolen GitHub tokens, ClickFix lures for Claude Code and help desk vishing enable data theft within minutes

A vendor-sponsored analysis by Exaforce (published on bleepingcomputer.com) says attackers are enumerating or exfiltrating data within about 15 minutes of gaining access. It describes three patterns: stolen developer GitHub OAuth tokens, ClickFix lures that impersonate Claude Code install instructions to deliver a macOS stealer, and help …

Scattered Spider technology software development